Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: 3lgQlGdPzUddC8A+rg2Wt0HTyFBcj9LX5V3E6Lh9X9w=
Subject key identifier: 87:71:51:A1:41:9E:E8:FA:4A:04:34:44:E1:78:B9:C1:C9:F5:29:E5
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 01A179CD2E35FDB2ECD7F03AF2A3B0013A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 10CA
Signing time: Mon 26 Oct 2026 20:00:52 +0000
Manifest this update: Mon 26 Oct 2026 20:00:52 +0000
Manifest next update: Tue 27 Oct 2026 20:00:52 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: uzl5eOUTKmIE0ggX4z4X8JxZ0XsFhOe0c6mhWP0t/Wo=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cd:2e:35:fd:b2:ec:d7:f0:3a:f2:a3:b0:01:3a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Oct 26 20:00:52 2026 GMT
Not After : Oct 27 20:00:52 2026 GMT
Subject: CN=877151a1419ee8fa4a043444e178b9c1c9f529e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e8:9d:9c:26:79:8c:51:e0:19:61:5b:f1:ab:
42:43:9b:20:5f:b4:1a:ef:6e:63:9f:b8:7b:b5:e5:
72:4a:d2:07:cd:7d:ce:12:d9:c4:f3:f5:90:bf:c3:
bb:d0:1f:ca:b7:f9:fc:87:c9:cc:e9:da:d3:04:cd:
4a:96:d5:d9:54:aa:6d:14:46:17:ec:5d:76:8f:1c:
50:79:f8:e3:cf:11:2a:44:38:3c:ea:bc:d1:58:d2:
13:27:36:6b:56:5d:9a:7a:4c:67:15:7f:c1:ea:4d:
9b:a5:8d:cb:9a:bf:fd:ff:88:84:ab:b1:14:24:b3:
b4:c0:a9:70:c2:5c:23:48:0f:6c:f2:09:f2:43:4d:
e1:3e:37:cd:f7:68:e5:4e:29:a7:c3:62:55:ed:95:
f8:67:b1:37:e8:6a:f7:3e:9e:f0:55:a3:1b:ca:ca:
89:6e:04:55:5b:c2:e2:42:c2:56:62:4b:5e:8e:a0:
ea:9a:0a:bc:53:61:56:16:10:e0:78:5a:f5:8f:4c:
e6:13:ad:51:83:fd:a6:e7:97:6e:93:16:e5:b3:aa:
4f:7d:fc:01:62:eb:9d:9b:bf:b5:42:c0:83:55:6c:
78:18:e3:77:95:ab:e8:bc:58:9f:20:ab:8c:0c:d0:
ee:da:68:c3:32:c5:ef:6d:11:bd:ce:fe:cb:6f:16:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:51:A1:41:9E:E8:FA:4A:04:34:44:E1:78:B9:C1:C9:F5:29:E5
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7c:5b:df:e4:0c:18:6c:48:69:bb:01:c7:a9:a7:ce:4d:60:
66:9a:7a:6c:4b:07:ba:1c:2c:c9:bf:6f:de:7b:23:42:a0:ea:
e9:0b:3c:05:79:1c:45:74:2c:e0:2a:0f:36:67:90:ef:f4:94:
85:e6:42:6f:07:00:d7:e9:b8:43:8e:55:de:f0:00:86:61:d9:
4e:1b:a0:ab:4e:3a:cc:d7:13:4a:e9:48:94:d6:f7:f0:68:fa:
5a:6a:c8:e8:6b:c3:73:bf:52:d1:09:fb:63:6d:42:97:02:f5:
07:d9:06:a2:da:ee:09:6b:f0:83:8a:6a:d8:ca:c8:dc:42:41:
b3:d7:98:4a:26:30:83:4c:c3:2a:f7:95:28:e8:8a:0a:3c:05:
59:89:7b:15:c8:1c:d2:49:85:9d:ea:d5:0e:f5:9e:e9:ae:3a:
38:37:98:09:07:e4:73:c5:e3:10:29:61:15:e8:bd:e4:9f:4d:
69:8b:7e:e4:d8:9d:a4:c0:82:94:67:7a:10:f0:77:50:40:d1:
02:73:52:74:4f:70:10:f9:a4:64:8f:d1:fb:a2:82:84:af:89:
f4:0d:65:67:a3:f3:a6:54:02:fb:f2:f3:94:f6:9e:2d:50:1d:
e5:bf:09:8d:13:8c:de:a9:e1:44:5d:89:83:6a:d3:72:2f:8f:
e8:cd:ae:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:49:42 2026 by rpki-client